Legal // Privacy
Privacy policy
Last updated: August 4, 2026
This policy describes how SenTeGuard LLC (“we,” “us”) processes personal information and other data in connection with the MoyoMap product website, request forms, and authorized assessments. MoyoMap is a product of SenTeGuard LLC; it is not a separate legal company.
Related: Terms · Authorized use · Security
How we classify data
MoyoMap workflows handle different classes of data under different rules. We do not treat them as one undifferentiated pool.
Class A
Marketing contact data
Information you provide to inquire, subscribe, or request a preliminary scan: typically work email, organization name, domain, optional scope notes, and similar form fields. We may also receive technical metadata such as IP address and user agent in server logs.
- · Purpose: qualify leads, respond to requests, deliver preliminary findings by email, product updates if you opt in
- · Example processors: site hosting, CRM / Mailchimp audience, transactional notification email
- · Not the same as: a full assessment corpus or confidential customer uploads
Class B
Public-source scan data
Lawfully accessible information collected during an authorized outside-in review for an organization and domain you specify—e.g. hiring posts, patents, filings, social posts, websites, and other open sources. This material is already public or otherwise lawfully available; it is not confidential data you upload through the website forms.
- · Purpose: map inference paths and initial exposures as described in your request and any later engagement scope
- · Authorization: preliminary scans and external reports run only with the authorization and public-source limits described on Authorized use
- · Not the same as: marketing CRM fields alone, or private documents you provide under a white-box SOW
Class C
Customer-provided confidential data
Non-public materials you deliberately provide under a written white-box or similar engagement—private document corpora, RAG indexes, internal knowledge bases, credentials issued for testing, or other confidential attachments listed in the scope of work. The public website forms, including the preliminary scan form, do not accept confidential document uploads from anonymous visitors.
- · Purpose: only the authorized white-box or enterprise testing described in the SOW
- · Controls: documented retention and deletion rules agreed with you; restricted access; see Security
- · Not the same as: lawful public web material gathered outside-in
Class D
Generated assessment findings
Work product we produce for you: inference maps, confidence and sensitivity scores, source attribution, exposure rankings, mitigation recommendations, and related briefing materials. Findings may reference public-source data, customer-provided data (if authorized), or both, depending on engagement type.
- · Purpose: deliver the engagement; support re-test or follow-on work only as agreed
- · Confidentiality: treated as customer confidential under the engagement agreement unless you authorize other use
- · Not the same as: marketing lists used for general product outreach
How we use information
We use each class only for its stated purposes: lead handling and communications (A); authorized outside-in analysis (B); authorized white-box testing (C); delivering and, where contracted, validating findings (D). We may also process data as needed to secure our systems, prevent abuse, and meet legal obligations.
Processors
We may use service providers such as hosting (e.g. Netlify), email/CRM (e.g. Mailchimp), and transactional email for notifications. Providers act under our instructions. Customer confidential (Class C) workloads are not mixed into general marketing audiences.
Retention and deletion
Marketing contact data is retained while relationships are active and as required for records. Public-source scan materials and generated findings are retained per engagement terms and then deleted or de-identified. Customer-provided confidential data is retained and deleted under the documented rules in your SOW and our authorized-use policy—typically the shortest period consistent with delivery, re-test options, and legal hold duties.
Your choices
Contact us to request access, correction, or deletion of personal information we hold about you, subject to legal exceptions and contractual obligations. Marketing preferences can be updated via unsubscribe links where provided.
Contact
Privacy inquiries: SenTeGuard LLC, Austin, TX, United States. Use the contact form.